In this podcast Patrick Gray talks to Tom Uren about how Microsoft continues to get important stuff wrong on Chinese vulnerability regulation and Russian cyber warfare. They also discuss how Cyber Safety Review Board’s decision to look at teenage hacking Lapsus$ is a good one, and how a Chinese APT group’s efforts to steal US Covid relief money will really annoy people. You can read the newsletter the podcast is based on here.